@aliyunrds/ctxdb 1.0.8-beta.1 → 1.0.8-beta.3

package/dist/{chunk-3B7J5VUT.js → chunk-EI63DQX3.js}

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 import {
   configDir
-} from "./chunk-KYW76CL7.js";
+} from "./chunk-BUK4SZC2.js";
 
 // src/lib/circuit.ts
 import { statSync, writeFileSync, unlinkSync, mkdirSync, readdirSync, readFileSync } from "fs";

package/dist/{chunk-TYW6ABNS.js → chunk-LZ2LOWZL.js}

@@ -2,10 +2,10 @@
 import {
   fetchKbCatalogBlock,
   recallTurn
-} from "./chunk-NF5KFV2P.js";
+} from "./chunk-7OX6UVPB.js";
 import {
   debug
-} from "./chunk-KYW76CL7.js";
+} from "./chunk-BUK4SZC2.js";
 
 // src/lib/warmup-recall.ts
 import { execSync } from "child_process";

package/dist/{chunk-SGRMPSZU.js → chunk-ZFS6OMWE.js}

@@ -4,12 +4,13 @@ import {
   isConnectionError,
   resetCircuit,
   tripCircuit
-} from "./chunk-3B7J5VUT.js";
+} from "./chunk-EI63DQX3.js";
 import {
   CtxdbError,
   debug,
+  isDataApiReady,
   isDebug
-} from "./chunk-KYW76CL7.js";
+} from "./chunk-BUK4SZC2.js";
 
 // src/lib/capture-orchestrator.ts
 import {
@@ -398,7 +399,7 @@ async function captureParsedMessages(parsed, cfg, client, agent = "default", ses
   };
 }
 function capturePreflight(cfg, agent) {
-  if (!cfg.apiKey || !cfg.baseUrl) {
+  if (!isDataApiReady(cfg)) {
     return { captured: false, reason: "config_incomplete", messageCount: 0 };
   }
   if (!cfg.autoCapture) {

package/dist/cli/main.js

@@ -16,7 +16,7 @@ import {
   uploadFile,
   uploadText,
   validateLocalFile
-} from "../chunk-NFAPLK4C.js";
+} from "../chunk-3NJ37TEY.js";
 import {
   AGENT_CHOICES,
   CtxdbError,
@@ -31,19 +31,20 @@ import {
   agentHomeDir,
   agentHomeDirs,
   agentPlatformSupport,
+  apiKeyCredential,
   configuredAgents,
   detectInstalledAgents,
   hasConfiguredAgent,
   inspectAgentHomes,
   isAgentSlug,
   isBuiltinAgent,
-  isComplete,
   load,
   removeAgent,
+  resolveDataApiCredential,
   save,
   updateConfiguredDebug,
   writeInstalledPkgVersion
-} from "../chunk-KYW76CL7.js";
+} from "../chunk-BUK4SZC2.js";
 import {
   beginUpdateNotification,
   completeUpdateNotification,
@@ -275,6 +276,8 @@ function formatStatusResult(r) {
     ["base_url", r.base_url],
     ["user_id", r.user_id],
     ["api_key", r.api_key_set ? "set" : "not set"],
+    ["access_token", r.access_token_set ? "set" : "not set"],
+    ["credential_type", r.credential_type ?? "none"],
     ["auto_capture", r.auto_capture],
     ["auto_recall", r.auto_recall],
     ["top_k", r.top_k],
@@ -323,15 +326,16 @@ function agentFromFlags(flags) {
 function buildContext(args) {
   const agent = agentFromFlags(args?.flags ?? {});
   const cfg = load({ agent });
-  if (!isComplete(cfg)) {
-    const hint = agent === "default" ? "run `ctxdb setup --api-key=<key> --base-url=<url>` or set CTXDB_API_KEY / CTXDB_BASE_URL env vars" : `run \`ctxdb setup --agent ${agent}\` or set CTXDB_API_KEY / CTXDB_BASE_URL / CTXDB_USER_ID env vars`;
+  const credential = resolveDataApiCredential(cfg);
+  if (!cfg.baseUrl || !credential) {
+    const hint = agent === "default" ? "run `ctxdb setup --api-key=<key> --base-url=<url>` or set CTXDB_ACCESS_TOKEN / CTXDB_API_KEY / CTXDB_BASE_URL env vars" : `run \`ctxdb setup --agent ${agent}\` or set CTXDB_ACCESS_TOKEN / CTXDB_API_KEY / CTXDB_BASE_URL / CTXDB_USER_ID env vars`;
     process.stderr.write(`config incomplete for agent ${agent}: ${hint}
 `);
     process.exit(2);
   }
   const client = new HttpClient({
     baseUrl: cfg.baseUrl,
-    apiKey: cfg.apiKey
+    credential
   });
   return { cfg, client, agent };
 }
@@ -389,7 +393,7 @@ function skillInstallRoot(agent) {
     case "hermes":
       return join(homedir(), ".hermes", "skills");
     case "workbuddy":
-      return join(homedir(), ".workbuddy", "skills");
+      return join(homedir(), ".workbuddy-ai", "skills");
   }
 }
 var SKILL_DIRS = ["contextdb-memory", "contextdb-knowledge"];
@@ -411,7 +415,7 @@ function hookConfigPath(agent) {
     case "claude":
       return join(homedir(), ".claude", "settings.json");
     case "workbuddy":
-      return join(homedir(), ".workbuddy", "settings.json");
+      return join(homedir(), ".workbuddy-ai", "settings.json");
     case "opencode":
     case "hermes":
       return null;
@@ -724,7 +728,10 @@ async function runSetup(options) {
       });
     } else {
       try {
-        const client = new HttpClient({ baseUrl: cfg.baseUrl, apiKey: cfg.apiKey });
+        const client = new HttpClient({
+          baseUrl: cfg.baseUrl,
+          credential: apiKeyCredential(cfg.apiKey)
+        });
         await client.get("/v1/ping/");
         steps.push({ step: "validate-ping", ok: true });
       } catch (err) {
@@ -1473,7 +1480,7 @@ var SKILL_INSTALL_TARGETS = {
   opencode: join(homedir(), ".config", "opencode", "skills"),
   openclaw: join(homedir(), ".openclaw", "skills"),
   hermes: join(homedir(), ".hermes", "skills"),
-  workbuddy: join(homedir(), ".workbuddy", "skills")
+  workbuddy: join(homedir(), ".workbuddy-ai", "skills")
 };
 function skillInstallTargetPath(target) {
   return SKILL_INSTALL_TARGETS[target] ?? null;
@@ -2090,12 +2097,13 @@ FLAGS
 `;
 async function inspectStatus(agent) {
   const cfg = load({ agent });
-  const complete = isComplete(cfg);
+  const credential = resolveDataApiCredential(cfg);
+  const complete = Boolean(cfg.baseUrl && credential);
   let connected = false;
   let pingError = null;
-  if (complete) {
+  if (complete && credential) {
     try {
-      const client = new HttpClient({ baseUrl: cfg.baseUrl, apiKey: cfg.apiKey });
+      const client = new HttpClient({ baseUrl: cfg.baseUrl, credential });
       await client.get("/v1/ping/");
       connected = true;
     } catch (err) {
@@ -2110,6 +2118,8 @@ async function inspectStatus(agent) {
       base_url: cfg.baseUrl,
       user_id: cfg.userId,
       api_key_set: Boolean(cfg.apiKey),
+      access_token_set: Boolean(process.env.CTXDB_ACCESS_TOKEN?.trim()),
+      credential_type: credential?.type ?? null,
       auto_capture: cfg.autoCapture,
       auto_recall: cfg.autoRecall,
       top_k: cfg.topK,
@@ -2192,12 +2202,13 @@ ${hint}
 async function ping(args) {
   const agent = agentFromFlags(args.flags);
   const cfg = load({ agent });
-  if (!isComplete(cfg)) {
+  const credential = resolveDataApiCredential(cfg);
+  if (!cfg.baseUrl || !credential) {
     fail(
-      `config incomplete for agent ${agent} \u2014 run \`ctxdb setup --agent ${agent}\` or set CTXDB_API_KEY / CTXDB_BASE_URL / CTXDB_USER_ID`
+      `config incomplete for agent ${agent} \u2014 run \`ctxdb setup --agent ${agent}\` or set CTXDB_ACCESS_TOKEN / CTXDB_API_KEY / CTXDB_BASE_URL / CTXDB_USER_ID`
     );
   }
-  const client = new HttpClient({ baseUrl: cfg.baseUrl, apiKey: cfg.apiKey });
+  const client = new HttpClient({ baseUrl: cfg.baseUrl, credential });
   const resp = await client.get("/v1/ping/");
   printResult(resp, !!args.flags.json);
   return 0;
@@ -4312,7 +4323,7 @@ COMMANDS
                                  Hermes     \u2192 writes agents.hermes config + ~/.hermes/config.yaml pre/post_llm_call hooks + skill
                                               Approve pre_llm_call + post_llm_call with \`hermes --accept-hooks chat\`
                                               (exit chat, rerun setup, then restart any running Hermes CLI/gateway)
-                                 WorkBuddy  \u2192 writes agents.workbuddy config + ~/.workbuddy/settings.json hooks + skill
+                                 WorkBuddy  \u2192 writes agents.workbuddy config + ~/.workbuddy-ai/settings.json hooks + skill
                                  --all       \u2192 detects and configures every setup-compatible built-in Agent
   status [--agent <name> | --all] [--json]
                                  Inspect configuration, connectivity, and integration health.
@@ -4474,6 +4485,7 @@ AGENT RESOLUTION (when --agent is omitted):
 ENV VARS (override selected ~/.ctxdb/ctxdb.json agent config):
   CTXDB_AGENT  CTXDB_API_KEY  CTXDB_BASE_URL  CTXDB_USER_ID
   CTXDB_AGENT_ID  CTXDB_APP_ID
+  CTXDB_ACCESS_TOKEN  Runtime-only Data API Bearer credential; takes precedence over API key
 
 UPDATE CHECK ENV VARS:
   CTXDB_DISABLE_UPDATE_CHECK=1

package/dist/hooks/hermes-post-llm-call.js

@@ -1,18 +1,19 @@
 #!/usr/bin/env node
 import {
   captureParsedMessages
-} from "../chunk-SGRMPSZU.js";
-import "../chunk-3B7J5VUT.js";
-import {
-  shouldSkipHooks
-} from "../chunk-5ML4VSXN.js";
+} from "../chunk-ZFS6OMWE.js";
+import "../chunk-EI63DQX3.js";
 import {
   HttpClient,
   agentFromArgvWithFallback,
   debug,
   load,
+  resolveDataApiCredential,
   setDebug
-} from "../chunk-KYW76CL7.js";
+} from "../chunk-BUK4SZC2.js";
+import {
+  shouldSkipHooks
+} from "../chunk-5ML4VSXN.js";
 import "../chunk-R67JELM7.js";
 import "../chunk-VIG4SYLU.js";
 
@@ -170,19 +171,20 @@ async function main() {
     }
     const input = extractHermesPostLlmCall(event);
     const cfg = load({ agent });
+    const credential = resolveDataApiCredential(cfg);
     setDebug(cfg.debug);
     debug("hermes.post_llm_call", "start", {
       sessionId: input.sessionId,
       messageCount: input.messages.length,
       userId: cfg.userId
     });
-    if (!cfg.apiKey || !cfg.baseUrl) {
+    if (!cfg.baseUrl || !credential) {
       debug("hermes.post_llm_call", "skip (config incomplete)");
       return 0;
     }
     const client = new HttpClient({
       baseUrl: cfg.baseUrl,
-      apiKey: cfg.apiKey,
+      credential,
       timeoutMs: 5e3
     });
     const result = await captureParsedMessages(

package/dist/hooks/hermes-pre-llm-call.js

@@ -2,28 +2,28 @@
 import {
   HOOK_TIMEOUT_MS,
   composeSessionStart
-} from "../chunk-TYW6ABNS.js";
+} from "../chunk-LZ2LOWZL.js";
 import {
   composeUserPromptSubmit
-} from "../chunk-LTAO6USK.js";
+} from "../chunk-AUBVVYQL.js";
 import {
   fetchKbCatalogBlock
-} from "../chunk-NF5KFV2P.js";
+} from "../chunk-7OX6UVPB.js";
+import "../chunk-3NJ37TEY.js";
 import {
   isCircuitOpen
-} from "../chunk-3B7J5VUT.js";
-import {
-  shouldSkipHooks
-} from "../chunk-5ML4VSXN.js";
-import "../chunk-NFAPLK4C.js";
+} from "../chunk-EI63DQX3.js";
 import {
   HttpClient,
   agentFromArgvWithFallback,
   debug,
-  isComplete,
   load,
+  resolveDataApiCredential,
   setDebug
-} from "../chunk-KYW76CL7.js";
+} from "../chunk-BUK4SZC2.js";
+import {
+  shouldSkipHooks
+} from "../chunk-5ML4VSXN.js";
 import "../chunk-R67JELM7.js";
 import "../chunk-VIG4SYLU.js";
 
@@ -109,6 +109,7 @@ async function main() {
     }
     const input = extractHermesPreLlmCall(event);
     const cfg = load({ agent });
+    const credential = resolveDataApiCredential(cfg);
     setDebug(cfg.debug);
     debug("hermes.pre_llm_call", "start", {
       prompt: input.prompt.slice(0, 200),
@@ -120,7 +121,7 @@ async function main() {
     const wantsRecall = cfg.autoRecall && Boolean(input.prompt.trim());
     const wantsSessionStart = input.isFirstTurn && Boolean(input.cwd) && (cfg.warmupRecall || cfg.kbCatalogInjection === "session_start");
     const wantsRepeatedSessionCatalog = cfg.kbCatalogInjection === "session_start";
-    if (!isComplete(cfg) || !wantsRecall && !wantsSessionStart && !wantsRepeatedSessionCatalog) {
+    if (!cfg.baseUrl || !credential || !wantsRecall && !wantsSessionStart && !wantsRepeatedSessionCatalog) {
       debug("hermes.pre_llm_call", "skip (config incomplete or no enabled injection)");
       return 0;
     }
@@ -132,7 +133,7 @@ async function main() {
     }
     const client = new HttpClient({
       baseUrl: cfg.baseUrl,
-      apiKey: cfg.apiKey,
+      credential,
       timeoutMs: HOOK_TIMEOUT_MS
     });
     const composed = await composeHermesPreLlmCall(cfg, agent, client, input);

package/dist/hooks/session-start.js

@@ -3,23 +3,23 @@ import {
   HOOK_TIMEOUT_MS,
   composeSessionStart,
   formatSessionStartStdout
-} from "../chunk-TYW6ABNS.js";
-import "../chunk-NF5KFV2P.js";
+} from "../chunk-LZ2LOWZL.js";
+import "../chunk-7OX6UVPB.js";
+import "../chunk-3NJ37TEY.js";
 import {
   isCircuitOpen
-} from "../chunk-3B7J5VUT.js";
-import {
-  shouldSkipHooks
-} from "../chunk-5ML4VSXN.js";
-import "../chunk-NFAPLK4C.js";
+} from "../chunk-EI63DQX3.js";
 import {
   HttpClient,
   agentFromArgvWithFallback,
   debug,
-  isComplete,
   load,
+  resolveDataApiCredential,
   setDebug
-} from "../chunk-KYW76CL7.js";
+} from "../chunk-BUK4SZC2.js";
+import {
+  shouldSkipHooks
+} from "../chunk-5ML4VSXN.js";
 import "../chunk-R67JELM7.js";
 import "../chunk-VIG4SYLU.js";
 
@@ -51,10 +51,11 @@ async function main() {
     const sessionId = typeof event.session_id === "string" ? event.session_id : typeof event.sessionId === "string" ? event.sessionId : null;
     if (!cwd) return 0;
     const cfg = load({ agent });
+    const credential = resolveDataApiCredential(cfg);
     setDebug(cfg.debug);
     debug("warmup", "start", { cwd, userId: cfg.userId });
     const kbInjectHere = cfg.kbCatalogInjection === "session_start";
-    if (!isComplete(cfg) || !cfg.warmupRecall && !kbInjectHere) {
+    if (!cfg.baseUrl || !credential || !cfg.warmupRecall && !kbInjectHere) {
       debug("warmup", "skip (config incomplete or both warmup+kb off)");
       return 0;
     }
@@ -64,7 +65,7 @@ async function main() {
     }
     const client = new HttpClient({
       baseUrl: cfg.baseUrl,
-      apiKey: cfg.apiKey,
+      credential,
       timeoutMs: HOOK_TIMEOUT_MS
     });
     const composed = await composeSessionStart(

package/dist/hooks/stop.js

@@ -1,18 +1,19 @@
 #!/usr/bin/env node
 import {
   captureTurn
-} from "../chunk-SGRMPSZU.js";
-import "../chunk-3B7J5VUT.js";
-import {
-  shouldSkipHooks
-} from "../chunk-5ML4VSXN.js";
+} from "../chunk-ZFS6OMWE.js";
+import "../chunk-EI63DQX3.js";
 import {
   HttpClient,
   agentFromArgvWithFallback,
   debug,
   load,
+  resolveDataApiCredential,
   setDebug
-} from "../chunk-KYW76CL7.js";
+} from "../chunk-BUK4SZC2.js";
+import {
+  shouldSkipHooks
+} from "../chunk-5ML4VSXN.js";
 import "../chunk-R67JELM7.js";
 import "../chunk-VIG4SYLU.js";
 
@@ -47,13 +48,14 @@ async function main() {
     if (typeof transcriptPath !== "string" || !transcriptPath) return 0;
     const sessionId = extractHookSessionId(event);
     const cfg = load({ agent });
+    const credential = resolveDataApiCredential(cfg);
     setDebug(cfg.debug);
     debug("capture", "start", { transcriptPath, userId: cfg.userId });
-    if (!cfg.apiKey || !cfg.baseUrl) {
+    if (!cfg.baseUrl || !credential) {
       debug("capture", "skip (config incomplete)");
       return 0;
     }
-    const client = new HttpClient({ baseUrl: cfg.baseUrl, apiKey: cfg.apiKey, timeoutMs: 5e3 });
+    const client = new HttpClient({ baseUrl: cfg.baseUrl, credential, timeoutMs: 5e3 });
     const result = await captureTurn(transcriptPath, cfg, client, agent, sessionId);
     if (result.captured) {
       debug("capture", `ok (${result.messageCount} msgs)`, result);

package/dist/hooks/user-prompt-submit.js

@@ -2,23 +2,23 @@
 import {
   composeUserPromptSubmit,
   formatUserPromptSubmitStdout
-} from "../chunk-LTAO6USK.js";
-import "../chunk-NF5KFV2P.js";
+} from "../chunk-AUBVVYQL.js";
+import "../chunk-7OX6UVPB.js";
+import "../chunk-3NJ37TEY.js";
 import {
   isCircuitOpen
-} from "../chunk-3B7J5VUT.js";
-import {
-  shouldSkipHooks
-} from "../chunk-5ML4VSXN.js";
-import "../chunk-NFAPLK4C.js";
+} from "../chunk-EI63DQX3.js";
 import {
   HttpClient,
   agentFromArgvWithFallback,
   debug,
-  isComplete,
   load,
+  resolveDataApiCredential,
   setDebug
-} from "../chunk-KYW76CL7.js";
+} from "../chunk-BUK4SZC2.js";
+import {
+  shouldSkipHooks
+} from "../chunk-5ML4VSXN.js";
 import "../chunk-R67JELM7.js";
 import "../chunk-VIG4SYLU.js";
 
@@ -50,9 +50,10 @@ async function main() {
     const sessionId = typeof event.session_id === "string" ? event.session_id : typeof event.sessionId === "string" ? event.sessionId : null;
     if (!prompt.trim()) return 0;
     const cfg = load({ agent });
+    const credential = resolveDataApiCredential(cfg);
     setDebug(cfg.debug);
     debug("recall", "start", { prompt: prompt.slice(0, 200), userId: cfg.userId });
-    if (!isComplete(cfg) || !cfg.autoRecall) {
+    if (!cfg.baseUrl || !credential || !cfg.autoRecall) {
       debug("recall", "skip (config incomplete or autoRecall=false)");
       return 0;
     }
@@ -62,7 +63,7 @@ async function main() {
 `);
       return 0;
     }
-    const client = new HttpClient({ baseUrl: cfg.baseUrl, apiKey: cfg.apiKey, timeoutMs: 5e3 });
+    const client = new HttpClient({ baseUrl: cfg.baseUrl, credential, timeoutMs: 5e3 });
     const { ctx, recall, kbBlock } = await composeUserPromptSubmit(
       cfg,
       agent,

package/dist/opencode/index.js

@@ -892,6 +892,9 @@ function agentRaw(raw) {
   if (!section || typeof section !== "object" || Array.isArray(section)) return {};
   return section;
 }
+function accessTokenFromEnv(env = process.env) {
+  return env.CTXDB_ACCESS_TOKEN?.trim() || null;
+}
 function applyEnv(cfg, env) {
   if (env.CTXDB_API_KEY) cfg.apiKey = env.CTXDB_API_KEY;
   if (env.CTXDB_BASE_URL) cfg.baseUrl = env.CTXDB_BASE_URL.replace(/\/+$/, "");
@@ -976,8 +979,8 @@ function loadOpencodeConfig(options = {}) {
   }
   return applyEnv(cfg, env);
 }
-function isConfigured(cfg) {
-  return Boolean(cfg.apiKey && cfg.baseUrl);
+function isConfigured(cfg, env = process.env) {
+  return Boolean((accessTokenFromEnv(env) || cfg.apiKey) && cfg.baseUrl);
 }
 
 // src/http-client.ts
@@ -995,11 +998,13 @@ var CtxdbHttpError = class extends Error {
 var HttpClient = class {
   baseUrl;
   apiKey;
+  accessToken;
   userAgent;
   fetchImpl;
   constructor(opts) {
     this.baseUrl = opts.baseUrl.replace(/\/+$/, "");
     this.apiKey = opts.apiKey;
+    this.accessToken = opts.accessToken ?? null;
     this.userAgent = opts.userAgent ?? "ctxdb-opencode-plugin/0.0.0";
     this.fetchImpl = opts.fetchImpl ?? globalThis.fetch.bind(globalThis);
   }
@@ -1008,7 +1013,8 @@ var HttpClient = class {
       "User-Agent": this.userAgent,
       Connection: "close"
     };
-    if (this.apiKey) h.Authorization = `Token ${this.apiKey}`;
+    if (this.accessToken) h.Authorization = `Bearer ${this.accessToken}`;
+    else if (this.apiKey) h.Authorization = `Token ${this.apiKey}`;
     if (contentType) h["Content-Type"] = contentType;
     return h;
   }
@@ -1125,7 +1131,11 @@ async function searchAndFormatRecall(prompt, cfg, client, timeoutMs, traceOption
     },
     store: {
       ...traceOptions.traceStore,
-      secrets: [...traceOptions.traceStore?.secrets ?? [], cfg.apiKey]
+      secrets: [
+        ...traceOptions.traceStore?.secrets ?? [],
+        cfg.apiKey,
+        client.accessToken
+      ]
     }
   } : null;
   if (trace) {
@@ -1454,10 +1464,14 @@ var SESSION_TTL_MS = 15 * 60 * 1e3;
 var SESSION_MAX = 100;
 var RECALL_TIMEOUT_MS = 5e3;
 var CAPTURE_TIMEOUT_MS = 8e3;
-function buildRuntime(config, cwd) {
+function buildRuntime(config, cwd, env = process.env) {
   return {
     config,
-    http: new HttpClient({ baseUrl: config.baseUrl, apiKey: config.apiKey }),
+    http: new HttpClient({
+      baseUrl: config.baseUrl,
+      apiKey: config.apiKey,
+      accessToken: accessTokenFromEnv(env)
+    }),
     sessionState: /* @__PURE__ */ new Map(),
     cwd
   };
@@ -1500,7 +1514,7 @@ async function buildHooks(input) {
     logDebug(
       config,
       "config",
-      "opencode integration disabled: missing agents.opencode.api_key in ~/.ctxdb/ctxdb.json or CTXDB_API_KEY"
+      "opencode integration disabled: missing CTXDB_ACCESS_TOKEN or API key in agents.opencode.api_key / CTXDB_API_KEY"
     );
     return {};
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aliyunrds/ctxdb",
-  "version": "1.0.8-beta.1",
+  "version": "1.0.8-beta.3",
   "type": "module",
   "description": "Unified access layer for RDS ContextDatabase: `ctxdb` CLI (memory + KB ops), one-shot multi-agent installer, per-agent config, hooks/plugins, and SKILL.md.",
   "license": "Apache-2.0",